General

  • Target

    3eb08237f92461439059f20e5734a97c_JaffaCakes118

  • Size

    542KB

  • Sample

    241013-jva7razhjk

  • MD5

    3eb08237f92461439059f20e5734a97c

  • SHA1

    44b1763c171afcc2a72c8c1054b79e61a4c88d33

  • SHA256

    0b19323988f19f2706e1ed1ae46079bc71ac5e8a762a8eecac1a6b05ddff291a

  • SHA512

    5b60b2d4eb9662d33f8a49a4aa9e6932d9436fa4d2ff824ddd1cf8d8472c2a31231f54de5de05db57919de81db08f57106aff212b60ea3a007f4d46b3fb49050

  • SSDEEP

    12288:0snE+k3cLXmlPSMMMpe60MFzeg7X+AX1XOup94:0uU3cLM1MV6vogbdD4

Malware Config

Extracted

Family

raccoon

Version

1.8.1

Botnet

59d412d4f41a89a59373ec4af49c5cc46ef2eed6

Attributes
  • url4cnc

    https://telete.in/hkeeplogup1

rc4.plain
rc4.plain

Targets

    • Target

      3eb08237f92461439059f20e5734a97c_JaffaCakes118

    • Size

      542KB

    • MD5

      3eb08237f92461439059f20e5734a97c

    • SHA1

      44b1763c171afcc2a72c8c1054b79e61a4c88d33

    • SHA256

      0b19323988f19f2706e1ed1ae46079bc71ac5e8a762a8eecac1a6b05ddff291a

    • SHA512

      5b60b2d4eb9662d33f8a49a4aa9e6932d9436fa4d2ff824ddd1cf8d8472c2a31231f54de5de05db57919de81db08f57106aff212b60ea3a007f4d46b3fb49050

    • SSDEEP

      12288:0snE+k3cLXmlPSMMMpe60MFzeg7X+AX1XOup94:0uU3cLM1MV6vogbdD4

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

MITRE ATT&CK Enterprise v15

Tasks